Olivier Dony
fb31330451
[FIX] auth_signup: correct leftover from 6d16915d39
...
The /web/signup controller was also supposed to get the special frame
header, like all sign-in/up pages.
2018-07-26 23:48:58 +02:00
Olivier Dony
9b3ca1af23
[MERGE] Forward-port 10.0 up to 1545995b39
2017-05-16 12:12:30 +02:00
Olivier Dony
6921da00b3
[FIX] auth_signup: properly log password reset requests
2017-05-05 17:02:46 +02:00
Olivier Dony
6d16915d39
[FIX] web: no frames on login/preferences screen
...
We generally consider this a low priority issue
as it is social-engineering based and many easier
options exist for targeting gullible users.
Nevertheless, protecting a couple of obvious pages
does not hurt.
2017-03-27 18:47:45 +02:00
Raphael Collet
d0ca2d115e
[REF] ir_config_parameter: remove group_ids and simplify
...
Add `sudo()` to call `get_param` where necessary, and make the web client use a
controller instead of directly accessing parameters.
2017-01-03 16:52:49 +01:00
Raphael Collet
7543afb070
[IMP] base, *: tighten ir.config_parameter access rights
...
Add `base.group_system` on existing parameters:
- `auth_signup.allow_uninvited`,
- `auth_signup.reset_password`,
- `auth_signup.template_user_id`,
- `google_redirect_uri`,
- `mail.bounce.alias`,
- `mail.catchall.alias`,
- `mail.catchall.domain`.
2017-01-03 16:52:49 +01:00
Christophe Simonis
321b7dc5b6
[MERGE] forward port branch 9.0 up to 9c8422a
2016-12-09 15:09:36 +01:00
Christophe Simonis
9c8422a405
[MERGE] forward port branch saas-6 up to 75e7f0d
2016-12-09 15:07:00 +01:00
Christophe Simonis
75e7f0da10
[MERGE] forward port branch 8.0 up to 5ece76b
2016-12-09 15:04:42 +01:00
sergiov
4792a669d3
[FIX] auth_signup: display full error message
...
When the user name entered hasn't an email specified the error message wasn't
displayed in the reset view.
The error message was in e.name, not e.message
2016-12-09 14:32:16 +01:00
Christophe Simonis
78d20b552b
[MERGE] forward port of branch saas-8 up to 7e44ddc
2016-01-27 12:24:04 +01:00
Martin Trigaux
bb56e484b7
[FIX] all: construction of translations lookup
...
When evaluated, the translation function never finds a match if a variable is
integrated into the untranslated text.
SHAME! 🔔 🙋
2016-01-13 14:46:30 +01:00
Christophe Simonis
4852d6033d
[MERGE] forward port of branch saas-8 up to 99b6cd8
2016-01-07 18:21:13 +01:00
Martin Trigaux
8b4f052a38
[MERGE] Forwardport of branch saas-6 up to c649bb0df
2016-01-05 18:28:06 +01:00
Martin Trigaux
955ed51687
[MERGE] Forwardport of branch 8.0 up to 6efc3712
2015-12-30 11:48:14 +01:00
Jairo Llopis
5425316eff
[FIX] auth_signup: no SQL error for duplicated user
...
In case of registration with an already existant user, an SQL error 'duplicate
key value violates unique constaint res_users_login_key...'
Replace by a more user friendly error.
Fixes #10068 , opw 659913
2015-12-16 14:16:49 +01:00
Kinjal Mehta
416903d1b9
[MIG] auth_signup: Migrated into new api.
2015-12-16 13:39:41 +01:00
Kinjal Mehta
327de507a7
[MOVE] auth_signup: Moved files in related models and views directory.
2015-12-16 12:20:41 +01:00
Martin Geubelle
65d0faca4d
[IMP] auth_signup: reset password form
...
* Hide 'back to login' when there is a token
* Hide the form when the token is invalid
2015-11-17 13:01:08 +01:00
Denis Ledoux
603dc8030c
[FIX] auth_signup: use request lang on signup if supported
...
When a user signs up, when the according option is
enabled in the General Settings
`Allow external users to sign up`
Use the request lang (the partner browser lang) to
sign up only if this language is installed
in the database.
opw-654007
2015-11-06 17:23:07 +01:00
Martin Trigaux
b6e1e2ec26
[FIX] auth_*: Authentification ain't a word
...
.. just like "ain't" by the way.
Courtesy of Lionel Sausin
2015-07-14 11:22:44 +02:00
Christophe Simonis
a304194936
[MERGE] forward port of branch saas-6 up to 81b5c60
2015-06-25 00:26:31 +02:00
Christophe Simonis
13468c271f
[MERGE] forward port of branch 8.0 up to ed3065e
2015-06-18 19:41:31 +02:00
Christophe Simonis
2451dfcee4
[FIX] auth_signup: set request lang to created user.
2015-06-17 14:32:53 +02:00
Olivier Dony
0bd4545348
[LEGAL] Use global LICENSE/COPYRIGHT files, remove boilerplate text
...
- Preserved explicit 3rd-party copyright notices
- Explicit boilerplate should not be necessary - copyright law applies
automatically in all countries thanks to Berne Convention + WTO rules,
and a reference to the applicable license is clear enough.
2015-06-02 03:16:04 +02:00
Leonardo Donelli
4a0b13ed92
[REF] remove vim modelines and resulting trailing blank lines
...
Let 2015 be a year without modelines!
cf #4174
2014-12-31 15:52:13 +01:00
Fabien Meghazi
8eed143112
[IMP] Invert multilang logic in route decorator. True by default, can be set to False explicitlty
2014-05-13 11:35:45 +02:00
Christophe Simonis
d93b79e6f4
[MERGE] forward port of branch saas-3 up to revid 9345 dle@openerp.com-20140324110349-e82t1bmmtjqbl85k
...
bzr revid: chs@openerp.com-20140324133811-4az1kvbznd26seow
2014-03-24 14:38:11 +01:00
Fabien Meghazi
2ed053642a
[IMP] oaut & signup, redirect if already logged in
...
bzr revid: fme@openerp.com-20140312112141-uvo89w4ovmzq5ozq
2014-03-12 12:21:41 +01:00
Fabien Meghazi
312991ca1e
[FIX] ensure_db() on inherited /web/login controllers
...
bzr revid: fme@openerp.com-20140227164141-1sblr0g6ta66q1em
2014-02-27 17:41:41 +01:00
Fabien Meghazi
152e70e9fa
[IMP] seperation of auth_signup's reset password and signup routes
...
bzr revid: fme@openerp.com-20140227154955-tnxyzw1ynuwlo5mj
2014-02-27 16:49:55 +01:00
Fabien Meghazi
2868e9a6ac
[MERGE] upstream
...
bzr revid: fme@openerp.com-20140227101725-7egd9xq859jasnhj
2014-02-27 11:17:25 +01:00
Fabien Meghazi
35a7182893
[MERGE] upstream
...
bzr revid: fme@openerp.com-20140225104654-d1ni7z5t8w0qc7mw
2014-02-25 11:46:54 +01:00
Denis Ledoux
4821fad601
[FIX] auth_signup: fix route when mode signup or reset
...
Do not call super web_login when in mode reset or signup mode, as this is non-sense.
bzr revid: odo@openerp.com-20140219110335-lz7ti2r1dxst36ty
2014-02-19 12:03:35 +01:00
Fabien Meghazi
6f670c58ce
[REM] Removed lazy response usage
...
bzr revid: fme@openerp.com-20140219103032-5pc50taemkc6x0qo
2014-02-19 11:30:32 +01:00
Christophe Simonis
c64a762d06
[FIX] auth_signup: correct authentification after successfull signup
...
bzr revid: chs@openerp.com-20140213190845-azch00bppzp1pk0d
2014-02-13 20:08:45 +01:00
Christophe Simonis
8d5da6b8b4
[FIX] auth_signup: when POSTing signup data, there is always an error in qcontext as default behaviour is trying to login with data (error injected by super() call)
...
bzr revid: chs@openerp.com-20140211140255-mv84m6fb0sqkflm5
2014-02-11 15:02:55 +01:00
Christophe Simonis
cebbede4c6
[FIX] auth_signup: do not shadow errors
...
bzr revid: chs@openerp.com-20140211132901-o7e8cup1hlc6mxzf
2014-02-11 14:29:01 +01:00
Fabien Meghazi
ebb03132a6
[ADD] multilang for auth_signup
...
bzr revid: fme@openerp.com-20140211132639-wcb2zrm0gnwnja1t
2014-02-11 14:26:39 +01:00
Fabien Meghazi
1d359eab49
[FIX] Use correct uid for rendering and cheat for website
...
bzr revid: fme@openerp.com-20140211124741-4y2z1szvakcy76tn
2014-02-11 13:47:41 +01:00
Fabien Meghazi
b9b42fadd0
[REM] ensure_db() nonsense
...
bzr revid: fme@openerp.com-20140211112229-9h52fb3zy6g4uo3w
2014-02-11 12:22:29 +01:00
al@openerp.com
a3710efdb1
dirty fix for auth_signup
...
bzr revid: al@openerp.com-20140208004731-atwco93ghwspmlh3
2014-02-08 01:47:31 +01:00
Fabien Meghazi
55c61046b9
[FIX] Do not allow signup and reset_password when no token given and opt-in has not been done in config
...
bzr revid: fme@openerp.com-20140206091722-xc8dv4whp1eb07z4
2014-02-06 10:17:22 +01:00
Fabien Meghazi
bce084bac2
[IMP] Seperate signup and reset into two controllers and templates
...
bzr revid: fme@openerp.com-20140205183232-fmlin6kiycu6bu0j
2014-02-05 19:32:32 +01:00
Fabien Meghazi
9ffb9d5632
[REM] Removed LoginForm javascript related
...
bzr revid: fme@openerp.com-20140205092354-oa6qxm0fsuojhuc2
2014-02-05 10:23:54 +01:00
Fabien Meghazi
967c9db196
[FIX] never let me commit in saas-3 again
...
bzr revid: fme@openerp.com-20140203124516-l8wwu9vdyo2nu2s0
2014-02-03 13:45:16 +01:00
Fabien Meghazi
4bf0284d4b
[IMP] Cosmetic change for easier debugging
...
bzr revid: fme@openerp.com-20140203122300-pduwmt5z5cprehey
2014-02-03 13:23:00 +01:00
Fabien Meghazi
e974e1fbea
[REM] remove disable_db and ensure_db() from addons
...
bzr revid: fme@openerp.com-20140130092308-s24a7h2mhzuaasf1
2014-01-30 10:23:08 +01:00
Fabien Meghazi
031523fa5b
[FIX] use of http#ensure_db in auth_* modules
...
bzr revid: fme@openerp.com-20140128211723-3135gyn0raxjz8qc
2014-01-28 22:17:23 +01:00
Christophe Simonis
4a965b96e5
[FIX] auth_signup: +s
...
bzr revid: chs@openerp.com-20140128142132-skzuuzmkhvsl1sgz
2014-01-28 15:21:32 +01:00